← All advisories

Medium severity6.1NVD Advisory· Published Nov 10, 2017· Updated Jun 17, 2026

CVE-2017-16782

CVE-2017-16782

Description

In Home Assistant before 0.57, it is possible to inject JavaScript code into a persistent notification via crafted Markdown text, aka XSS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
home-assistant-frontendnpm	>= 0	—

Affected products

2

Jpettitt/Home Assistant
cpe:2.3:a:home-assistant:home-assistant:*:*:*:*:*:*:*:*
Range: <=0.56.2
ghsa-coords
pkg:npm/home-assistant-frontend
Range: >= 0

Patches

Vulnerability mechanics

References

3

github.com/home-assistant/home-assistant-polymer/pull/514nvdIssue TrackingPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-7wfq-wmx2-3wr4ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2017-16782ghsaADVISORY

News mentions

0

No linked articles in our index yet.